RE-Mind: a First Look Inside the Mind of a Reverse Engineer - Archive ouverte HAL
Communication Dans Un Congrès Année : 2022

RE-Mind: a First Look Inside the Mind of a Reverse Engineer

Simone Aonzo
Yanick Fratantonio
  • Fonction : Auteur
Davide Balzarotti

Résumé

When a human activity requires a lot of expertise and very specialized cognitive skills that are poorly understood by the general population, it is often considered 'an art.' Different activities in the security domain have fallen in this category, such as exploitation, hacking, and the main focus of this paper: binary reverse engineering (RE). However, while experts in many areas (ranging from chess players to computer programmers) have been studied by scientists to understand their mental models and capture what is special about their behavior, the 'art' of understanding binary code and solving reverse engineering puzzles remains to date a black box. In this paper, we present a measurement of the different strategies adopted by expert and beginner reverse engineers while approaching the analysis of x86 (dis)assembly code, a typical static RE task. We do that by performing an exploratory analysis of data collected over 16,325 minutes of RE activity of two unknown binaries from 72 participants with different experience levels: 39 novices and 33 experts.
Fichier principal
Vignette du fichier
publi-6700_1.pdf (1.33 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04093439 , version 1 (10-05-2023)

Identifiants

  • HAL Id : hal-04093439 , version 1

Citer

Alessandro Mantovani, Simone Aonzo, Yanick Fratantonio, Davide Balzarotti. RE-Mind: a First Look Inside the Mind of a Reverse Engineer. USENIX 2022, 31st USENIX Security Symposium, 10-12 August 2022, Boston, MA, USA, Usenix, Aug 2022, Boston (MA), United States. ⟨hal-04093439⟩

Collections

EURECOM
37 Consultations
168 Téléchargements

Partager

More